Function validQueryText

internal/server/middleware_request_text.go:326–348

validQueryText reports whether every key and value a handler could read out of this raw query string is bindableText. WHAT IT CHECKS AGAINST. url.ParseQuery is the same call r.URL.Query() makes, so the pairs checked in the decode step are exactly the pairs a handler can see — there is no equivalent

(rawQuery string)

// introduce anything, and none of these can put a NUL into a string that
// had none.
func validQueryText(rawQuery string) bool {
	if rawQuery == "" {
		return true
	}
	if !bindableText(rawQuery) {
		return false
	}
	if !strings.Contains(rawQuery, "%") {
		return true
	}
	q, _ := url.ParseQuery(rawQuery)
	for key, values := range q {
		if !bindableText(key) {
			return false
		}
		for _, v := range values {
			if !bindableText(v) {
				return false
			}
		}
	}
	return true
}

// unicodeEscapePrefix is the four bytes that begin any JSON \u escape for a
// character below U+0100. Built from bytes rather than written as a literal,